@retasc/cli 1.12.0 → 1.13.0

package/dist/index.js

@@ -11,6 +11,7 @@ import { identityAction } from "./commands/identity.js";
 import { doctorAction } from "./commands/doctor.js";
 import { billingAction } from "./commands/billing.js";
 import { isNetworkError, readLocalBinding, resolveBinding } from "./lib/binding.js";
+import { whoamiView, orgCreatedView, projectCreatedView, keyListView, inviteListView, } from "./lib/format.js";
 import { tidyAction, doneAction } from "./commands/tidy.js";
 import { runProxy } from "./proxy.js";
 import { deviceLogin } from "./auth.js";
@@ -77,7 +78,8 @@ program
 program
     .command("whoami")
     .description("Show THIS folder's org/project binding, plus the signed-in user and their orgs.")
-    .action(async () => {
+    .option("--json", "Emit the raw payload instead of the summary.")
+    .action(async (opts) => {
     // RTSC-91 (§13): lead with the binding for the folder you're in — the same
     // "you are in org X / project Y" heads-up the agent gets — so a human can
     // confirm scope before any work. Resolved from the local key, server-enforced.
@@ -111,7 +113,9 @@ program
     }
     try {
         const me = await api.me();
-        console.log(JSON.stringify(me, null, 2));
+        // RTSC-521: the binding block above is untouched — it was already the good half of
+        // this command. Only the payload dump becomes a summary.
+        console.log(opts.json ? JSON.stringify(me, null, 2) : whoamiView(me));
     }
     catch (e) {
         fail(e);
@@ -200,11 +204,12 @@ org
     .command("create")
     .requiredOption("--name <name>")
     .option("--slug <slug>")
+    .option("--json", "Emit the raw payload instead of the summary.")
     .action(async (opts) => {
     requireLogin();
     try {
-        const res = await api.createOrg({ name: opts.name, slug: opts.slug });
-        console.log(JSON.stringify(res, null, 2));
+        const res = (await api.createOrg({ name: opts.name, slug: opts.slug }));
+        console.log(opts.json ? JSON.stringify(res, null, 2) : orgCreatedView(res, opts.name));
     }
     catch (e) {
         fail(e);
@@ -216,11 +221,16 @@ project
     .requiredOption("--org-id <id>")
     .requiredOption("--name <name>")
     .requiredOption("--prefix <PREFIX>")
+    .option("--json", "Emit the raw payload instead of the summary.")
     .action(async (opts) => {
     requireLogin();
     try {
-        const res = await api.createProject({ orgId: opts.orgId, name: opts.name, prefix: opts.prefix });
-        console.log(JSON.stringify(res, null, 2));
+        const res = (await api.createProject({
+            orgId: opts.orgId,
+            name: opts.name,
+            prefix: opts.prefix,
+        }));
+        console.log(opts.json ? JSON.stringify(res, null, 2) : projectCreatedView(res, opts.name));
     }
     catch (e) {
         fail(e);
@@ -279,12 +289,14 @@ key
 });
 key
     .command("list")
+    .description("List an org's agent keys, newest first.")
     .requiredOption("--org-id <id>")
+    .option("--json", "Emit the raw payload instead of the table.")
     .action(async (opts) => {
     requireLogin();
     try {
-        const res = await api.listKeys({ orgId: opts.orgId });
-        console.log(JSON.stringify(res, null, 2));
+        const res = (await api.listKeys({ orgId: opts.orgId }));
+        console.log(opts.json ? JSON.stringify(res, null, 2) : keyListView(res));
     }
     catch (e) {
         fail(e);
@@ -347,11 +359,12 @@ members
     .command("list")
     .description("List an org's invites and their status (owner only).")
     .requiredOption("--org-id <id>")
+    .option("--json", "Emit the raw payload instead of the table.")
     .action(async (opts) => {
     requireLogin();
     try {
-        const res = await api.listInvites({ orgId: opts.orgId });
-        console.log(JSON.stringify(res, null, 2));
+        const res = (await api.listInvites({ orgId: opts.orgId }));
+        console.log(opts.json ? JSON.stringify(res, null, 2) : inviteListView(res));
     }
     catch (e) {
         fail(e);

package/dist/lib/format.js

@@ -0,0 +1,157 @@
+import { clean } from "./text.js";
+// RTSC-521 — the CLI's human-readable views.
+//
+// Five commands used to answer a person with `JSON.stringify(res, null, 2)`, including
+// `whoami`, which is the command someone runs to find out who they are. The one fact they
+// wanted was a bracket to parse, next to a Convex document id that means nothing to them.
+//
+// The "it's good for the agent" defence does not apply: agents never see CLI stdout. They
+// talk to MCP directly, and `whoami` exists there as its own tool. Nothing was reading
+// these payloads but a human.
+//
+// PURE, and returning strings rather than printing them, for two reasons. Tests can pin the
+// wording without scraping stdout, and every one of these values came off the wire — so
+// `clean()` belongs at the point of formatting, once, rather than at each interpolation
+// where a later line can forget it.
+//
+// The shape follows `commands/billing.ts`, which already got this right: an aligned summary
+// by default, `--json` for the raw payload. It is one pattern, not two.
+/** Width of the label column. Matches billing.ts's `row()` so the CLI reads as one tool. */
+const LABEL = 13;
+/** One `label   value` line. Multi-line values stay hung under the value column. */
+export function labelled(rows) {
+    return rows
+        .map(([label, value]) => {
+        const [head, ...rest] = String(value).split("\n");
+        const pad = " ".repeat(LABEL);
+        return [`${label.padEnd(LABEL)}${head}`, ...rest.map((r) => `${pad}${r}`)].join("\n");
+    })
+        .join("\n");
+}
+/**
+ * An aligned table, or a plain sentence when there is nothing in it.
+ *
+ * `empty` is required rather than optional: a list command that prints a bare header row
+ * and nothing else reads like a failure, and every caller has something truer to say.
+ */
+export function table(headers, rows, empty) {
+    if (rows.length === 0)
+        return empty;
+    const widths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length)));
+    // The last column is never padded — trailing spaces are invisible until someone copies
+    // a line out of their terminal and finds them.
+    const line = (cells) => cells.map((c, i) => (i === cells.length - 1 ? c : c.padEnd(widths[i]))).join("  ").trimEnd();
+    return [line(headers), ...rows.map(line)].join("\n");
+}
+/**
+ * How long ago, in the coarsest unit that is still true.
+ *
+ * A raw epoch is the specific thing this issue exists to remove: a revoked key reading as
+ * `1785660358922` is a number someone skims past, and "revoked" is the fact.
+ */
+export function ago(ms, now = Date.now()) {
+    if (ms == null)
+        return "never";
+    const s = Math.max(0, Math.round((now - ms) / 1000));
+    if (s < 60)
+        return "just now";
+    const m = Math.round(s / 60);
+    if (m < 60)
+        return `${m}m ago`;
+    const h = Math.round(m / 60);
+    if (h < 24)
+        return `${h}h ago`;
+    return `${Math.round(h / 24)}d ago`;
+}
+/** A date a human can read, for a deadline rather than an elapsed time. */
+export function day(ms) {
+    return ms == null ? "—" : new Date(ms).toISOString().slice(0, 10);
+}
+/**
+ * Who you are, and where you can act.
+ *
+ * The user id is dropped: nothing a person types accepts it. The org id is KEPT, because
+ * the very next command genuinely wants it (`retasc bind --org-id …`, `members invite
+ * --org-id …`) — the same reason the Dash surfaces it on the Settings page.
+ */
+export function whoamiView(me) {
+    const u = me.user ?? {};
+    const who = [u.name, u.email && `<${u.email}>`].filter(Boolean).map(clean).join(" ");
+    const orgs = me.orgs ?? [];
+    return labelled([
+        ["Signed in", who || "unknown"],
+        [
+            "Orgs",
+            // Said in words. An empty array printed as `[]` is the exact moment this command
+            // stops answering the question it was asked.
+            orgs.length === 0
+                ? "none"
+                : orgs
+                    .map((o) => {
+                    const bits = [clean(o.name)];
+                    if (o.slug)
+                        bits.push(`(${clean(o.slug)})`);
+                    const tail = [o.role && clean(o.role), o.deleting && "DELETING"].filter(Boolean);
+                    // `o.id` is Convex-generated and so not attacker-influenced today. Cleaned
+                    // anyway: this function's job is that nothing reaches a terminal unsanitised,
+                    // and one raw interpolation is how the next field added here gets missed.
+                    return `${bits.join(" ")}${tail.length ? ` · ${tail.join(" · ")}` : ""}\n  ${clean(o.id)}`;
+                })
+                    .join("\n"),
+        ],
+    ]);
+}
+export function orgCreatedView(res, name) {
+    // `ownerMemberId` is deliberately not shown. It comes back in the payload and there is no
+    // command that takes it, so printing it is noise a reader has to decide to ignore.
+    return [
+        `✓ Created org "${clean(name)}"${res.slug ? ` (${clean(res.slug)})` : ""}.`,
+        "",
+        labelled([["Org id", clean(res.orgId ?? "—")]]),
+        "",
+        `Next:  retasc bind --org-id ${clean(res.orgId ?? "<id>")}`,
+    ].join("\n");
+}
+export function projectCreatedView(res, name) {
+    return [
+        `✓ Created project "${clean(name)}"${res.prefix ? ` (${clean(res.prefix)})` : ""}.`,
+        "",
+        labelled([["Project id", clean(res.projectId ?? "—")]]),
+        "",
+        `Issues here will be numbered ${clean(res.prefix ?? "PREFIX")}-1, ${clean(res.prefix ?? "PREFIX")}-2, and so on.`,
+    ].join("\n");
+}
+/**
+ * The org's agent keys.
+ *
+ * Session keys (RTSC-50) are folded into a count rather than listed. They are auto-minted
+ * per session and can outnumber the real workspace keys many to one, which is why the Dash
+ * groups them too — a list where the manageable rows are lost among machine-minted children
+ * is a list nobody reads.
+ */
+export function keyListView(rows, now = Date.now()) {
+    const workspace = rows.filter((k) => !k.parentKeyId);
+    const sessions = rows.length - workspace.length;
+    const body = table(["KEY", "PROJECT", "AGENT", "RUNTIME", "LAST USED"], workspace.map((k) => [
+        clean(k.displayPrefix ?? k.name ?? "—"),
+        clean(k.project ?? "—"),
+        clean(k.agent ?? "—"),
+        clean(k.runtime ?? "—"),
+        // State first: a revoked key that reads as a date is one someone counts as live.
+        k.revokedAt ? "revoked" : ago(k.lastUsedAt, now),
+    ]), "No keys yet. Mint one with `retasc key mint`.");
+    return sessions > 0
+        ? `${body}\n\n(${sessions} session key${sessions === 1 ? "" : "s"} not shown — auto-minted per agent session.)`
+        : body;
+}
+export function inviteListView(rows) {
+    return table(["CODE", "ROLE", "STATUS", "INVITED BY", "EXPIRES"], rows.map((i) => [
+        clean(i.displayPrefix ?? "—"),
+        clean(i.role ?? "—"),
+        clean(i.status ?? "—"),
+        clean(i.invitedBy ?? "—"),
+        // Only a LIVE invite has a deadline worth reading. On a spent one the date is
+        // still in the payload and still means nothing.
+        i.status === "pending" ? day(i.expiresAt) : "—",
+    ]), "No invites yet. Create one with `retasc members invite --org-id <id>`.");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retasc/cli",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "Retasc CLI — sign in with GitHub, create projects, mint agent API keys, and wire your agent to the Retasc MCP server in one command.",
   "type": "module",
   "bin": {